ForgeRock Directory Services 7.5

ForgeRock Directory Services version 7.4 has been released. According to the release notes, changes in this release include:

  • Added a new dsrepl disaster-recovery mechanism for safer disaster recovery procedures
  • Removed the existing dsrepl start-disaster-recovery and dsrepl end-disaster-recovery commands
  • Updated HDAP support to provide the ability to authenticate with a bearer tokens
  • Updated the server so that it can immediately start maintaining new indexes for previously unused attributes
  • Improved the efficiency of using equality indexes for presence searches
  • Expanded the ability to use VLV indexes for some kinds of search requests
  • Updated access log messages to better reflect when a search is unindexed
  • Added processing time metrics for persistent searches
  • Updated the server to improve resource limit evaluation for requests using proxied authorization
  • Added support for Java 17 and Java 21
  • Removed support for Java 11
  • Added support for Amazon Linux 2023
  • Added a dsrepl decode-csn command
  • Included the hostname in the supportextract archive file
  • Introduced changes to prevent direct upgraes from 7.4 instances using data encryption with AES/GCM
  • Fixed an internal error resulting from certain kinds of unknown requests
  • Fixed a potential schema violation resulting from an etag in the schema configuration entry
  • Fixed an issue in which a TOO_LATE replication status would not mark a server as unhealthy
  • Fixed an issue with the ds-mon-receive-delay metric
  • Fixed an issue with dsrepl initialize when a custom schema file only includes sync state entries
  • Fixed an issue in which authenticating using the REST API did not properly honor the force-change-on-add configuration
  • Removed support for SNMP monitoring
  • Removed the already-deprecated /admin and /api endpoints from newly created server instances
  • Made a number of changes to the server’s plugin API, some of which may affect existing plugins
  • Deprecated the legacy Prometheus metrics format in favor of a new format
  • Deprecated a number of existing Prometheus metrics in favor of new metrics with improved names